VULNERABILITY INTELLIGENCE
CVE-2022-26871
CVSS score9.8 CRITICAL
EPSS probability19.48%
CISA KEVKnown exploited vulnerability
Published2022-03-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
Trend Micro Apex Central Arbitrary File Upload Vulnerability
Vendor / product: Trend Micro / Apex Central
Description
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.
Weakness classification
- nvd@nist.gov: CWE-345
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-345
Primary references
- security@trendmicro.com — Vendor Advisory
- security@trendmicro.com — Third Party Advisory, VDB Entry
- security@trendmicro.com — Mitigation, Patch, Vendor Advisory
- security@trendmicro.com — Mitigation, Patch, Vendor Advisory
- security@trendmicro.com — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource